Buy coin on exchange to be safer. To know if an ICO is scam, look if it is suspicious (see newsfeed for its social media websites, see if it interacts with its investors and see the legitimacy of their project). Don't trust on what they are saying because most of ICOs don't do their promises.